Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier: NfRhVVXskbLnUK0RjVAZa3U0ss6QauFN18EDw9AeuYU=
Subject key identifier: 0C:73:DE:7E:25:7E:FC:7F:ED:31:F6:C2:67:0B:EA:5C:A3:1E:F9:23
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 01974667335BCE6D547FE88DB6D846BACB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number: 0119
Signing time: Fri 06 Jun 2025 18:00:57 +0000
Manifest this update: Fri 06 Jun 2025 18:00:57 +0000
Manifest next update: Sat 07 Jun 2025 18:00:57 +0000
Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: ksqx246icT25GDMRCHCcE9KotPqTWe/XDBEob0oMUVg=)
2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:33:5b:ce:6d:54:7f:e8:8d:b6:d8:46:ba:cb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Jun 6 18:00:57 2025 GMT
Not After : Jun 7 18:00:57 2025 GMT
Subject: CN=0c73de7e257efc7fed31f6c2670bea5ca31ef923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:0a:81:c0:58:23:41:9c:4a:17:79:b4:81:
b6:d3:c0:d6:6f:9f:02:3b:5b:02:a9:41:9d:0e:1b:
87:d8:0e:c2:e8:e6:8d:77:c1:07:96:d0:73:a8:25:
da:5e:c6:5f:80:92:fb:36:36:42:a8:45:bc:29:f8:
ac:40:55:c4:17:d9:b0:44:56:d5:e1:b2:3b:6f:a0:
f5:70:0c:22:c3:de:d4:6a:49:5f:c1:c1:bf:f5:e2:
0c:31:8c:fc:0c:90:44:6e:70:45:d8:d7:f7:68:02:
22:43:e5:50:9f:8a:7d:ab:5e:96:f5:0b:e1:02:18:
b3:80:37:14:41:82:f2:9b:4c:c2:8a:97:95:a0:a0:
ff:2f:77:28:de:b9:27:f4:1f:48:13:9c:02:75:4a:
a6:ea:6e:66:c0:03:5b:82:66:ad:57:4f:4b:91:bb:
37:49:3d:ad:63:17:f4:de:3f:d0:98:3c:77:74:66:
fe:f2:c8:17:71:a2:8d:2d:68:3e:f4:a9:58:8b:7b:
91:4d:08:c7:d0:e6:15:85:13:26:12:60:7e:95:70:
44:4b:ab:e0:a8:3c:b8:b0:e0:4d:1a:41:35:3a:ad:
a0:6c:98:82:a0:25:31:f7:71:72:98:88:f9:0a:92:
12:44:47:54:0c:8f:df:ee:9c:83:70:58:d9:e8:2b:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:DE:7E:25:7E:FC:7F:ED:31:F6:C2:67:0B:EA:5C:A3:1E:F9:23
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ba:4d:2e:8a:58:33:0a:68:e5:0e:86:b1:5e:5d:93:60:6a:
9e:62:b7:48:24:38:39:f2:dc:9a:11:50:f7:b9:66:72:7d:49:
b3:df:67:d4:fc:58:15:4d:68:29:3e:8b:9a:ff:f9:7b:b6:d0:
3f:9d:94:b9:51:4f:a8:0f:89:fd:0b:27:1f:83:d0:80:31:37:
2e:3b:d3:aa:47:e2:4a:7a:5c:b3:cc:ba:d2:98:d0:d8:8a:95:
f6:b7:82:d9:e6:5c:6e:90:bb:41:3c:b6:ee:c5:64:15:3d:56:
c8:1e:35:b6:3a:f2:6b:24:02:a6:bb:3a:76:bd:41:ca:45:18:
e8:33:e8:15:f4:d9:a4:1f:05:cc:6a:89:57:2d:62:dd:90:34:
c3:73:1c:f3:f6:b1:91:67:d3:32:ac:b7:89:ed:1e:e3:a9:34:
5e:fe:2f:2b:97:bc:af:9a:ba:b1:fa:5e:27:bf:25:ed:f8:78:
00:a5:de:bb:9e:6e:72:29:10:ff:da:65:48:92:2a:9b:a7:4a:
81:dd:fb:91:b7:e3:35:af:32:9b:a0:80:88:f3:d8:8b:76:25:
b3:6c:72:06:6b:9d:31:1c:22:27:4a:b0:e3:0e:d9:fa:5c:bf:
40:fb:76:3c:e9:94:8b:50:e7:37:d2:f4:0c:2d:0d:cd:8a:b0:
6f:ec:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:08:28 2025 by rpki-client